A leaked Carder.Pro vBulletin forum database indexed by leaksear.ch on October 14, 2026 contains 73,981 account records, roughly 74,000 users, with emails, usernames, password hashes, salts, dates of birth, IP address fields, and account metadata (leaksear.ch metadata). Public reporting identified Carder.Pro as an underground carding forum tied to the Carder.su ecosystem, but the supplied metadata does not include a breach date (leaksear.ch metadata) (krebsonsecurity.com, www.wired.com).
What happened
Carder.Pro was not a conventional consumer service. In 2013, KrebsOnSecurity described Carder.Pro as a crime forum with thousands of active members around the world, and WIRED reported that a Carder.su administrator was believed to be running Carder.Pro as a successor forum (krebsonsecurity.com, www.wired.com).
That context matters because the U.S. Department of Justice said Operation Open Market targeted Carder.su members involved in trafficking compromised credit card data, counterfeit identification, money laundering, narcotics trafficking, and computer crime. DOJ said the organization operated forums where members could buy illicitly obtained data and discuss fraud schemes (www.justice.gov).
The indexed source is an account database leak from a vBulletin forum database, not a public breach notice (leaksear.ch metadata). Public sources reviewed for this article show Carder.Pro appearing in underground forum database leaks, including an eSentire webinar deck hosted by BrightTALK that listed Carder.pro under Forum DB Leaks, but they do not establish how this specific vBulletin database was obtained or the date it was first exposed (www.brighttalk.com).
What data was exposed
According to leaksear.ch indexing metadata, the searchable fields are date of birth, email address, hashed password, IP address, salt, and username (leaksear.ch metadata).
The records also contain forum account and profile metadata, including birthday values, join and last-activity fields, post and reputation counters, user and display group identifiers, profile visit counts, homepage and legacy messenger fields such as AIM, ICQ, MSN, Skype, and Yahoo, plus administrative and preference fields (leaksear.ch metadata).
The dataset description says the credential material consists of password hashes with salts, not plaintext passwords (leaksear.ch metadata).
Why this matters
Email addresses, usernames, dates of birth, IP address fields, and legacy messenger handles can help link Carder.Pro forum personas to real-world accounts, a risk mirrored by eSentire public OSINT material showing underground forum database leaks used to correlate aliases across Carder.Pro, OpenSC, and Carder.su (www.brighttalk.com).
Hashed passwords and salts still create account-takeover risk when weak or reused passwords are cracked and then matched to the same email or username on other services (leaksear.ch metadata).
Dates of birth and IP address fields can make phishing, doxing, or extortion attempts more credible when combined with the Carder.Pro identity context reported by KrebsOnSecurity and WIRED (krebsonsecurity.com, www.wired.com).
Because the exposed data is forum account metadata, security teams should treat a match as an exposure indicator, not proof that the person remains active on any forum (leaksear.ch metadata).
Check your exposure
Request access to check this leak source, or sign in if you already have an account. You can search it by date of birth, email, hashed password, ip address, salt, and username.